> Russian Espionage Operation Targets Organizations Linked to Ukraine War

In Operation RoundPress, the compromise vector is a spearphishing email leveraging an XSS vulnerability to inject malicious JavaScript code into the victim's webmail page